r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe6b02, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$P9_RREADDIR(r0, &(0x7f0000000000)={0xb, 0x29, 0x2}, 0xb)